CVE-2026-89997

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists when the resume ioctl and remove ioctl are issued simultaneously. This can lead to a device being resumed after it has been suspended in the dm destroy() function, resulting in the table being destroyed without the postsuspend() method being called. Because device-mapper targets expect removal only after postsuspend() has executed, this failure can cause misbehavior in various targets. For instance, in the dm-integrity target, the reboot notifier may not be unregistered, which leads to a use-after-free condition, where the system attempts to access memory that has already been released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.